WordPress Plugin Vulnerabilities

LWS Cleaner < 2.3.1 - Cross-Site Request Forgery

Description

Cross-Site Request Forgery (CSRF) vulnerability in LWS Cleaner plugin <= 2.3.0 versions.

Affects Plugins

Plugin icon
lws-cleaner
Fixed in 2.3.1

References

CVE
CVE-2023-35781

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
5.4 (medium)

Miscellaneous

Original Researcher
konagash
Verified
No
WPVDB ID
5f85521f-07a3-45cc-8ab3-56dd501f3826

Timeline

Publicly Published
2023-07-11 (about 2 years ago)
Added
2023-07-11 (about 2 years ago)
Last Updated
2023-07-11 (about 2 years ago)

Other

Published
Title
Published
2024-08-16
Title
Short URL <= 1.6.8 - Cross-Site Request Forgery via configuration_page
Published
2026-01-23
Title
AdminQuickbar <= 1.9.3 - Cross-Site Request Forgery to Settings Update
Published
2024-04-04
Title
Classified Listing < 3.0.5 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account
Published
2025-06-19
Title
Oganro Travel Portal Search Widget for HotelBeds APITUDE API <= 1.0 - Cross-Site Request Forgery
Published
2025-03-11
Title
price-calc <= 0.6.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting